Azure AD Connect |
|
Azure Enum |
|
Cloud Enum |
|
Unconstrained Delegation |
|
Abuse Parent Child Domain Trusts |
|
Account Operators |
|
AD Recycle Bin |
|
ADCS |
|
AddKeyCredentialLink |
|
AddMember |
|
AddSelf |
|
ADFS |
|
ADIDNS |
|
Advance curl |
|
Advance wget |
|
AllowedToDelegate |
|
Alternate Data Stream |
|
Android |
|
Apache |
|
Apache Tomcat |
|
Apt |
|
AWS |
|
Bloodhound |
|
Built-in Group |
|
Bypass ASMI |
|
Compressed Files |
|
Connection from Public Internet |
|
Constrained Delegation |
|
CouchDB |
|
Create custom dll |
|
Cron Jobs |
|
Cross Session Relay |
|
Custom Word List Generator |
|
disk group |
|
DNS Enum |
|
Docker |
|
Docker Registry |
|
dotnet |
|
DPAPI |
|
Drupal |
|
elasticsearch |
|
Electron |
|
ExecuteDCOM |
|
File Transfer (Linux To Linux) |
|
File Transfer (Linux to Windows) |
|
File Transfer (Windows To Linux) |
|
File Transfer (Windows To Windows) |
|
Find |
|
Find (Windows) |
|
Finger Protocol |
|
Firefox |
|
Firewall (Windows) |
|
Flask Cookie |
|
ForceChangePassword |
|
Forward Shell |
|
FTP |
|
GenericAll |
|
GenericWrite |
|
GetChanges/GetChangesAll |
|
git |
|
GPG |
|
GPOs |
|
Graphql |
|
Grep |
|
Hydra |
|
IIS |
|
IMAP |
|
IRC |
|
Java |
|
Java Environment |
|
Joomla |
|
JWT |
|
Keepass |
|
Kerberoasting |
|
Kerberos |
|
Krbrelayx |
|
Kubelet |
|
Kubernetes |
|
LDAP |
|
Linux hard disk encryption |
|
Listeners |
|
lxd |
|
Machine Account |
|
Magic Bytes |
|
memcache |
|
Memory Dump |
|
Metasploit |
|
Metasploit Listener |
|
Metasploit Shellcode |
|
Microsoft Access Database |
|
Microsoft Oulook Email Folder |
|
MongoDB General |
|
Monitor Process (Windows) |
|
Mount Share |
|
MSSQL Agent Jobs |
|
MSSQL General |
|
MSSQL Linked Servers |
|
MSSQL Privilege Escalation |
|
Mysql General |
|
Mysql Privilege Escalation |
|
NetExec (nxc) |
|
Network Discovery |
|
Network Traffic Pivoting |
|
Nginx |
|
Nmap |
|
npm |
|
NTLM Relay Attack |
|
NTP |
|
Openssl |
|
openvpn |
|
Oracle Database |
|
Padding Oracle |
|
Password Cracking |
|
Persistence |
|
Phishing |
|
PHP Command Shell |
|
pip |
|
POP3 |
|
Port Knocking |
|
Postgresql |
|
Pypi |
|
Python Decompile |
|
rbash |
|
RBCD Attack |
|
RDP |
|
ReadGMSAPassword |
|
ReadLAPSPassword |
|
Redis |
|
Retrieve Flask Debug Pin |
|
RPC |
|
rsync |
|
Runas |
|
SCCM |
|
Scheduled tasks |
|
Searchsploit |
|
SeBackupPrivilege/SeRestorePrivilege |
|
secretsdump |
|
Secure String |
|
SeDebugPrivilege |
|
SeImpresonate |
|
SeLoadDriverPrivilege |
|
Shadow Hash Cracking |
|
Silver Ticket |
|
SMB Enum |
|
SMB Server |
|
SMTP |
|
SNMP |
|
SQL Injection |
|
SQLite |
|
Squid Proxy |
|
SSH |
|
SSL |
|
Steganography |
|
Subdomain Enum |
|
sudoers |
|
TFTP |
|
Upgrade Shell |
|
VNC |
|
Volume Shadow Copies |
|
VPN |
|
Web Directory Enum |
|
Webdav |
|
whois |
|
Windows ACLs |
|
Windows Defender |
|
Windows Event Logs |
|
Windows RPC |
|
Windows Services |
|
Winrm |
|
Winrm from Windows VM |
|
Wordpress |
|
Writable /etc/passwd |
|
WriteDacl |
|
WriteOwner/Own |
|
XXE (XML External Entity) |
|
Zabbix |
|